[ACCUMULO-958] Support pluggable encryption in walogs

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.0
• Component/s: logger
• Assignee: Michael Allen
• Reporter: John Vines
• Created: 11/Jan/13 17:17
• Updated: 03/Sep/13 21:42
• Resolved: 03/Sep/13 21:42

Description

There are some cases where users want encryption at rest for the walogs. It should be fairly trivial to implement it in such a way to insert a CipherOutputStream into the data path (defaulting to using a NullCipher) and then making the Cipher pluggable to users can insert the appropriate mechanisms for their use case.

This also means swapping in CipherInputStream and putting in a check to make sure the Cipher type's match at read and write time. Possibly a versioning mechanism so people can migrate Ciphers.

Issue Links

• Is contained by: ACCUMULO-998 support encryption at rest
• is related to: ACCUMULO-1032 encryption changes break diagnostic LogReader
• is related to: ACCUMULO-1216 reconsider using SequenceFiles for the WAL

Sub-Tasks

• WAL encryption beaks WAL: Resolved
• DfsLogger.write(LogFileKey, LogFileValue) flushes with every call: Resolved